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Abstract. In this paper we classify curves of genus two over a perfect field fc 
of characteristic two. We find rational models of curves with a given arithmetic 
structure for the ramification divisor and we give necessary and sufficient conditions 
for two models of the same type to be fc- isomorphic. As a consequence, we obtain an 
explicit formula for the number of fc-isomorphism classes of curves of genus two over 
a finite field. Moreover, we prove that the field of moduli of any curve coincides with 
its field of definition, by exhibiting rational models of curves with any prescribed 
value of their Igusa invariants. Finally, we use cohomological methods to find, for 
each rational model, an explicit description of its twists. In this way, we obtain a 
parameterization of all fc-isomorphism classes of curves of genus two in terms of 
geometric and arithmetic invariants. 
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Introduction 

Let k be a perfect field of even characteristic. Igusa described in [5] 
the moduli variety for curves of genus two as certain 3-dimensional 
affine variety, whose /c-points are in bijection with k 3 . Moreover, he 
gave explicit formulas to compute the moduli point of a curve in terms 
of invariants. In section 2 of this paper we prove that the field of moduli 
of any curve coincides with its field of definition, so that the Igusa in- 
variants determine a bijection between the set of /c-isomorphism classes 
of curves of genus two defined over k and the affine space k 3 . This is 
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known to be false for some fields of odd or zero characteristic (cf. [7]). 
We prove this result by exhibiting rational models of curves with any 
prescribed value of their invariants. 

Rational models of curves of genus two are studied more gener- 
ally in section 1, where we obtain an effective classification, up to 
fc-isomorphism, of curves of genus two defined over k. For each possi- 
ble arithmetic structure of the ramification divisor, the corresponding 
curves admit quasi-affine models y 2 + y = u(x), where u(x) € k(x) is a 
rational function with a concrete divisor of poles. The /c-isomorphism 
classes of these curves are in bijection with the orbits of these ratio- 
nal functions u(x) under a double action by the Artin-Schreier group 
AS(k(x)) and the projective linear group PGL^/c). In paragraph 1.3 we 
carry out this classification in a very explicit manner. As a by-product, 
we obtain an explicit computation of the /c-automorphism group of each 
curve. 

In section 3 we describe all twists of a given curve C, in terms 
of the rational models of section 1. This is achieved by computing 
H l {Gk, Aut(C)) for any possible structure of Aut(C). Together with 
the result of section 2, this computation furnishes an explicit param- 
eterization of all /c-isomorphism classes of curves of genus two, each 
class being determined by a couple of invariants: one geometric (a triple 
(ji)i2i J3) £ k 3 of values of the Igusa invariants) and the other arith- 
metic (a concrete twist of a chosen curve having (ji, j'2, J3) as geometric 
invariants). 

Our initial motivation for this work was to classify curves of genus 
two over finite fields of even characteristic, in view of their use in Cryp- 
tography (cf. [4]). In the finite field case our results provide formulas 
for the number of curves of genus two with a fixed structure of the 
ramification divisor (paragraph 1.4) and for the number of curves with 
a fixed structure of the full automorphism group (paragraph 3.2). 



1. Rational models of curves of genus two 

We fix once and for all a perfect field k of even characteristic and an 
algebraic closure k of k. We denote by the Galois group Gal(k/k) 
and by x 1 ^ sjx the automorphism of k inverse of the Frobenius au- 
tomorphism, x ^ x 2 . Also, ¥2^ and // n will denote respectively the 
unique finite subfield of k with 2 m elements and the subgroup of k of 
the n-th roots of unity. Finally, we denote fj, n (k) = fi n n k. 

By a curve of genus two we mean a smooth, projective, geometrically 
irreducible curve of genus two. 
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1.1. Hyperelliptic curves 

In this paragraph we review well-known results on hyperelliptic curves. 
Let C be a hyperelliptic curve defined over k; that is, C is a smooth, 
projective and geometrically irreducible curve defined over k, of genus 
g > 2, admitting a degree 2 morphism tt: C — ► P 1 , which is also defined 
over k. 

The corresponding extension of function fields, k(C)/TT*(k(P 1 )), is 
a cyclic quadratic extension (if it were not separable, then k(C) would 
be a function field of genus zero). To the non-trivial element of the 
Galois group it corresponds an involution, i: C — ► C, which is called 
the hyperelliptic involution of C. By definition, thus, two points P,Q 6 
C(k) have the same image under tt if and only if Q = P or Q = P L . 

We recall some basic properties of i based on the crucial fact that 
it is a canonical involution, independent of the morphism tt. 

THEOREM 1. Let tti,tt 2 :C — ► P 1 be two k-morphisms of degree 2. 
Then, there exists a unique k- automorphism 7 of P 1 such that 1T2 = 

7 O 7Tl. 

COROLLARY 2. 

1. The hyperelliptic involution is canonical. The fixed points of 1 are 
the Weierstrass points of C and they are the ramification points of 
any morphism of degree 2 from C to P 1 . 

2. Any k- automorphism <p of C fits into a commutative diagram: 

C C 



7 

> 



for certain uniquely determined k- automorphism 7 G Aut/ c (P 1 ). 
The map tp 1— ► 7 is a homomorphism (depending on tt) and we 
have an exact sequence of groups: 

1 — <t> — Aut fc (C) Aut^P 1 ). 

In particular, 1 commutes with every automorphism of C . 

We recall now some generalities on Artin-Schreier (i.e. cyclic qua- 
dratic) extensions of a field K of even characteristic. Let K scp be a fixed 
separable closure of K and Gk = Ga\(K scp /K). The Artin-Schreier 
homomorphism, x 1— > AS(x) = x + x 2 , fits into an exact sequence: 

— > ¥ 2 — ► K scp K scp — ► 0, 
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leading to an isomorphism H 1 {Gk,^2) — if/ AS(K). Thus, the group 
if/ AS (if) classifies all cyclic quadratic (or trivial) extensions of if. 
Any u E if — AS (if) determines a separable quadratic extension of 
if by adjoining to if the roots of the separable irreducible polynomial 
Y 2 + Y + u. An element u' E if furnishes the same extension than u if 
and only if u + v! £ AS (if). Moreover, any cyclic quadratic extension 
of if can be obtained this way. If if is a finite field, AS (if) coincides 
with the subgroup of elements of absolute trace zero and if/ AS (if) 
has only two elements. 

By fixing a point oo € P 1 (fc), we fix isomorphisms ^(P 1 ) ~ k(x) 
and Aut fe (P 1 ) ~ PGL 2 (fc)- The function field k{C) is then identified 
(via 7T*) to an Artin-Schreier extension of k(x) and it admits an Artin- 
Schreier generator y G k(C) satisfying y 2 + y = u(x), for certain 
u(x) e k(x) - AS(k(x)). 

Conversely, for any u(x) G k(x) — AS(k(x)), the equation y 2 + y = 
u(x) determines an Artin-Schreier extension, L = k(x,y), of k(x). 
Such an equation determines a plane non-singular quasi-affine curve 
C af = C^ x y defined over k. We shall denote by C = C u ^ the pro- 
jective, smooth curve obtained as the normalization of the projective 
closure of C af . The projection on the first coordinate, (x, y) *— > x, lifts 
to a morphism of degree 2, ir:C — > P 1 , implicitly associated to the 
equation. Clearly, the function field of C is fc-isomorphic to L and 
the homomorphism 7r*:fc(P 1 ) — ► k(C) translates into k(x) ^ k(x,y) 
under natural identifications. 

Since C af is non-singular, we can identify its points with an open 
subset of C(k); this allows us to attach affine coordinates to most of 
the points of C. Hence, to deal with these curves in practice, it is not 
necessary to find equations for C itself, as soon as one has control on 
the finite set of points at infinity: := C{k) — C af (fc). Note that the 
ramification points of ir lie above poles of u(x); hence, they are always 
points at infinity. 

The genus g of C u m is easily determined in terms of the poles of 
odd order of the elements in u(x) + AS(k(x)), and C u ( x ) is always 
geometrically irreducible, hence a hyperelliptic curve, when g > 2 (cf. 
Proposition 4 below). In affine coordinates, the hyperelliptic involution 
is then expressed as: (x,y) L = (x, y + 1). After Theorem 1, it is easy to 
determine in terms of u(x) the /c-isomorphism class of C u < x y. 

PROPOSITIONS. Two hyperelliptic curves C u ^, C u /( x ) are k-iso- 
morphic if and only if 

u'(x) = u('j(x)) (mod AS(k(x))), 

for some 7 G PGL^fc). 
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Proof. By Theorem 1 and the structure of Artin-Schreier extensions, 
any fc-isomorphism between these two curves must be of the type: 

(x,y) h-> (j(x),y + v(x)), (1) 

for some 7 G PGL^fc), v(x) G k(x), and the identity u'{x) = u(7(x)) + 
v(x) + v{x) 2 must hold. □ 

Therefore, the classification of hyperelliptic curves up to fc-isomor- 
phism amounts to the classification of rational functions u(x) 6 k(x) 
(with sufficiently many poles of odd order) under the double action of 
AS(/c(x)) and PGL^fc). In the next paragraph we shall indicate how to 
carry out this classification, and in paragraph 1.3 we shall apply this 
procedure for curves of genus two in a very explicit manner. 

1.2. Ramification divisor 

Given a smooth, projective curve C defined over k and a separable 
/c-morphism ir: C — ► P 1 , we define the ramification divisor of ir as 
the divisor, Diff(C/F 1 ), of C naturally associated to the different of 
the extension of function fields k(C) / n* (k(P 1 )) (cf. [9, ch.III]). For any 
point P G C(k), if ep is the ramification index at P and dp is the 
exponent of the different at P, then dp > ep — 1, with equality if and 
only if ep is odd (cf. [9, 111,5.1]); hence, the support of the ramification 
divisor is the set of ramification points of it. 

We have seen in the last paragraph that any u{x) G k{x) — AS(/c(x)) 
determines a smooth projective curve C u t x \ with quasi-affine model 
y 2 + y = u(x) and implicitly equipped with a separable morphism of 
degree 2 to P 1 . By a procedure that goes back to Hasse (cf . [3] ) , one can 
find a suitable element v(x) 6 k(x) such that u(x) +v (x) + v (x) 2 has no 
poles of even order. Once this normalization is achieved, the location 
and order of the poles of u{x) determine the ramification divisor of 
C u ( x y More precisely: 

PROPOSITION 4. [9, III. 7.8] Let u{x) G k(x)-AS(k(x)) be a rational 
function having no poles of even order. Let C = C u i x \ be the smooth, 
projective curve defined over k, with quasi-affine model y 2 + y = u(x). 
Then, 

DifT(C/P 1 )= ]T ( ]T(m Q + l)p), 

QeP 1 (fc) P ^Q 

where 

m = f-l, if ovd Q (u(x)) > 0, 
^ \ m, if ordg(u(x)) = — m < 0. 
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Moreover, 

k(C)Dk = k u{x) g k + AS{k(x)) BiS(C/¥ l ) + 0, 

and, when this condition is satisfied, one has deg(Diff (C/P 1 )) = 2g + 2, 
where g is the genus of C. In particular, if deg(Diff (C/P 1 )) > 6, then 
C is a hyperelliptic curve defined over k. 

By Theorem 1, if C is a hyperelliptic curve, the ramification divisor 
is independent of tt and, for any isomorphism <p: C — ► C, we have 
V?*(Diff(C"/P 1 )) = Diff(C*/P 1 ). From now on we shall denote: 

W := 7r,(Diff(C/P 1 )), IV := {7 G PGL 2 (A;) | 7 *(VF) = W}. 

These two objects depend on tt, but the reference to tt is omitted and 
it will be always implicit in the context. Since any fc-automorphism (p 
of C leaves the ramification divisor invariant, the automorphism of P 1 
associated to ip lies in T\y; hence, we have actually an exact sequence: 

1 — <0 ^ Aut fc (C) rv. 

A natural strategy to classify hyperelliptic curves up to fc-isomor- 
phism is to determine first, up to the action of PGL2(&), the possible 
divisors W of P 1 that can appear as the push-forward of ramification di- 
visors of hyperelliptic curves and, afterwards, classify the curves linked 
to a concrete divisor W. Proposition 4 takes care of the first step. Let 
us indicate a procedure to carry out the second step. 

Let W be a fixed effective divisor of P 1 with even coefficients and let 
W' be the divisor obtained by lowering all positive coefficients by one. 
Note that the isotropy subgroups of W, W under the action of PGL2(fc) 
are the same. Let TZy/i C k{x) be the set of rational functions having 
W' as divisor of poles and let M C TZw be a system of representatives 
of these functions modulo AS(k(x)). We can define an action of Ty/ 
over N on the right. Given u(x) G N and 7 G T\y, the divisor of poles 
of 7*(u(x)) = u('j(x)) is again W' and we define u 7 (x) to be the only 
element of N such that: 

^(7(2;)) = u 7 (x) (mod AS(fc(x))). 

For any 7 G Ty/ and u(x) G M, denote by v uri (x) G k(x) any choice 
of a rational function satisfying: 

u(7(x)) = n 7 (x) + v Mj7 (x) + v un (x) 2 . 

Let us check that (7, u(x)) i-> n 7 (x) defines an action of on 
indeed. For any couple 7, 77 G we have: 

(777)*(n(x)) = n 7,? (x) + v ur/v (x) + v„, 7 ^(x) 2 , 
?7*(7*(n(x))) = (u^ix) + w U 7^(x) + w U 7^(x) 2 + 
+ r?*K ;7 (x)) + t?*(v Ui7 (x)) 2 . 
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Since these two elements coincide, the functions u' yv (x), (u 7 ) r '(x) must 
be equal too, since both belong to J\f and they are congruent modulo 
AS(fc(a:)). 

For any u(x) G M, denote by r„( x ) the isotropy group of u(x): 
T u {x) ={l £T W \ u{x) = u'(x)}. 
PROPOSITION 5. Let W, V w , M C k{x) be as above. 

1. For any u(x),u'(x) G M, the curves C u ( x ), C u /( x ) are k-isomorphic 
if and only if there exists 7 G Ty/ such that u'(x) = u J (x). 

2. For any u(x) G M , we have an exact sequence: 

1 — ► (1) — > Autfc(C! u ( x )) — »■ r u ( x ) — ► 1. 

Moreover, if the map v u : T u ^ — > k(x), given by 7 1— > v U;1 (x), is a 

homomorphism, then the exact sequence splits. 
Proof. The first assertion is an immediate consequence of Proposition 
3. Let if be a /c-automorphism of C u ( x y By (1), the automorphism 
7 = 7r(<£>) satisfies: 

u(x) = u(7(x)) (mod AS(/s(x))), 

so that = u 7 (x) and 7 G r u ( x ). Conversely, given 7 G r u ( x ), we 
can construct (p by taking: 

<p*(x) =7(x), y>*(y) =y + w«, 7 (a;). 

Clearly, if f M is a homomorphism, the map 7^1/) obtained in this way 
is a homomorphism too. □ 



1.3. Normal equations for curves of genus two 

Let C be a smooth, projective, geometrically irreducible curve of genus 
two defined over k. The canonical morphism, ir: C — ► P 1 , is defined 
over k and has degree 2, so that C is a hyperelliptic curve. Hence, 
C admits a quasi-affine model y 2 + y = u(x), for certain u(x) G 
k(x) — AS(k(x)) without poles of even order. By Proposition 4, the 
ramification divisor of C has degree 6 and one of the following possible 
forms: 

Diff(C/P 1 ) = 

2P\ + 2P2 + 2P3, if u(x) has three simple poles, 
2P\ + 4P2, if u(x) has two poles, of orders 1,3, 

6P, if u(x) has only one pole, of order 5. 
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We label these possibilities respectively as: case (1,1,1), case (1,3), 
and case (5). Since this divisor is defined over k, in cases (1,3) and 
(5) all points in the support are defined over k too. However, in case 
(1,1,1) we have three different arithmetic structures for the ramification 
divisor: three points defined over k, one point defined over k and two 
points conjugate over a quadratic extension of k or, finally, all three 
points conjugate over a cubic extension of k. We shall refer to them 
respectively as cases (l,l,l)-split, quadratic and cubic. 

The divisor W = 7r*(Diff (C/P 1 )) has support on the poles of u(x). In 
cases (l,l,l)-split, (1,3) and (5), by applying a suitable /c-automorphism 
of P 1 , we can impose that this support is a subset of {oo, 0, 1}. Let us 
display now a couple of Lemmas that are necessary to fix the support 
of W in the cases (l,l,l)-quadratic and cubic. 

LEMMA 6. Let 5,5' be two G k -subsets of¥ l (k) with \S\ = \S'\ = 3. 
Then, there exists 7 G PGL2(&) such that 7(5) = S' if and only if S 
and S' are isomorphic as Gk-sets. 

Proof. Clearly, any 7 G PGL2(/e) respects the G^-structure. Con- 
versely, if p: S — ► S' is a Gfc-bijection, take 7 G PGL2(fc) such that it 
coincides with p over S. Then, for any a G G^ and any x G S, we have: 

7 ( CT x) = p(*x) = \p{x)) = ^(x)) = ^x). 

Hence 7 = °7 for all a G and 7 belongs to PGL2(fc). □ 

LEMMA 7. For any cubic extension K/k, there exists a generator 
G K with minimal equation x 3 + sx + s, s 7^ 0, over k. Ifw,w + 1 G k 
are the two roots of the equation s + 1 = w + w 2 , then the other two 
roots of the polynomial x 3 + sx + s are: 

9' = 9(8 + w), 9" = 8(9 + w + 1). 

In particular, the extension K/k is cyclic if and only if s + 1 G AS(/c). 

Proof. Replacing 9 by #+Trft-/ fe (0), we can assume that Tr^/ fc (0) = 0. 
Suppose that x 3 +ax+b is the minimal polynomial of 9 over k. Replacing 
9 by 9 + 9 2 , if necessary, we can assume moreover that Then, the 

minimal polynomial of ab~ 1 9 is x 3 + sx + s, where s = a?b~ 2 . Finally, 
the assertions concerning the conjugates of 9 can be checked by a direct 
computation. □ 

We proceed now to exhibit families of normal equations describing 
all fe-isomorphism classes of curves of genus two. For each of the above 
types of ramification divisor we fix a system of representatives of divi- 
sors W of this type modulo the action of PGL2(fc), and for each W we 
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apply the procedure indicated at the end of the last paragraph. We find 
a suitable family Af of normal equations and, just by computing the 
action of Tw on Af and applying Proposition 5, we classify the curves 
in Af up to fc-isomorphism and we determine the structure of the k- 
automorphism group of each curve. In each case, the rational functions 
in Af depend on certain parameters, and we implicitly identify Af with 
the set of values of these parameters. 

Case (l,l,l)-split 

Let Af = k* xk* xk* x (k/ AS(fc)). Any curve with ramification divisor 
of this type is fc-isomorphic to one of the curves C a t c d with quasi-affine 
model: 



For these curves, W = 2[oo] + 2[0] + 2[1], and the set of points at 
infinity contains only the three Weierstrass points of the curve, which 
are all defined over k. The subgroup T := Ty/ is the isotropy group of 
{oo, 0, 1} under the action of PGL2(fc) over P 1 (/c): 

T = {x, l/x, 1 + x, x/(l + x), 1/(1 + x),(l + x)/x} ~ S 3 . 

In order to interpret properly the next result and the analogous 
Propositions taking care of the other cases, we emphasize that, when 
comparing two elements of Af, the fourth coordinate has to be under- 
stood as an element of kj AS(fc). 

PROPOSITION 8. 

1. For any (a,b,c,d), (a' ,b' ,d ,d') G Af, the curves C a 'b'c'd'> are 
k-isomorphic if and only if {a! ,b' \d ,d') coincides with one of the 
following elements in the orbit of (a,b,c,d) under the action ofT: 



y 2 + y = ax H 1 + d, (a, b, c, d) G Af. 



x x + 1 



(a, b, c, d) 1 = < 



' {a,b,c,d), if 7(2 

(b,a,c,d + c), if j(x 

(a,c,b,d + a), if j(x 

(c, 6, a, d + c + b + a), if j(x 

(b,c,a,d + c + b), if 7(2 

(c, a, b, d + b + a), if 7(2 



x/(l + x), 
1/(1 + x), 
(1 + x)/x. 



l/x, 



l + x, 



2. For any (a, b, c, d) G Af, we have an split exact sequence: 



1 



<0 



Autfc (C a bcd) 




1- 



cnp.tex; 1/02/2008; 11:03; p. 9 



10 



G. Cardona, E. Nart and J. Pujolas 



Fabcd being the isotropy group of (a,b,c,d) under the action ofT: 



S3, if a = b = c G AS(fc), 
C 3 , if a = b = ci AS(fc), 
abed — \ C2, if exactly two of the coefficients a,b,c coincide 
and the third belongs to AS(k), 
L, otherwise. 

Proof. To any (a, b, c, d) G M, we assign a unique element u(x) = 
ax + j + jr^x + d € A;(x), by making a choice of d € k inside the class 
modulo AS(fc) given by the fourth coordinate. The family of rational 
functions obtained in this way is a system of representatives modulo 
AS(k(x)) of the functions having [00] + [0] + [1] as divisor of poles and we 
can apply Proposition 5. Only the fact that we can choose the mapping 
v u :F u / x \ — ► k(x) to be a homomorphism deserves some explanation. 
Given u(x) as above and 7 G T u ^, it is easily checked that v un (x) is 
a constant satifying, respectively, 



v u ,y + v ua = 0,c,a,c + b + a, c + b,b + a, 

according to the different possible values of 7. Assume for instance that 
a = b = c 6 AS (A;) and let u; G fe be such that a = w + w 2 . Then, the 
following choice for v urt determines a homomorphism: 



u i7 



ro, if 

\ w, if 



7 has order 1 or 3, 
7 has order 2. 



The other cases are similar and easier. 



□ 



From the exact sequence above, one can determine the fc-automor- 
phisms of C a bcd- For instance, if a = b = c G AS(fc) and a = w + w 2 for 
certain w £ k, the twelve /c-automorphisms of C a b c d are: 



z,y) ^ (x,y), 

x,y) ^ (x + + 
x,y) ^ (l/(l+x),y), 



((1 + x)/x,y), 
w), 



y'2 jj 

x, y) 1 — ► (a;/ (1 + x), y + to) 



x,y) h-^ (x,y + 1), 
z,y) ^ (x + l,y + w + 1), 
x,y) ^> (l/(l + x),y + l), 
z,y) 1 — ► ((! +x)/x,y + 1), 
z,y) ^ (l/^,y + t« + l), 



»,y) 



(x/(l + x),y + w + 1). 



Case (1,1,1) -quadratic 

We fix a system of representatives r G At of all non-trivial classes of 
k/AS(k). 
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Let N = k* x ((jfe x k) - {(0, 0)}) x (fc/AS(fc)). Any curve with 
ramification divisor of this type is ^-isomorphic to one of the curves 
C r abcd with quasi-affine model: 



y 2 + y = ax+ ^ + c yd, (a,b,c,d) £ N. (2) 

x z + x + r 



For these curves, W = 2[oo] + 2[6] + 2[9'] , where 6,6' e k are the 
roots of the irreducible polynomial x 2 + x + r. The set of points at 
infinity contains only the three Weierstrass points of the curve, one of 
them defined over k, the other two defined over the quadratic extension 
determined by the class of r modulo AS(/c). The subgroup V := Tw 
is the isotropy group of {oo, 6, 6'} under the action of PGL2(fe) over 

r = {x, i + x} ~ c 2 . 

By Lemma 6, two curves corresponding to different values of r are 
not /c-isomorphic. If k is a finite field, there is a single value of r: any 
choice of r £ k — AS(fc). 

PROPOSITION 9. Letrek- AS(fc) be fixed. 

1. For any (a,b,c,d), (a' ,b' ,c' ,d') G N, the curves C r a i h , dd i, C r ahcd are 
k-isomorphic if and only if (a' ,b' , c' ,d') coincides with one of the 
following elements in the orbit of (a,b,c,d) under the action ofY: 



(a, b, c, d)"' 



(a,b,c,d), if 1 ( x ) = x, 

(a, b, b + c, d + a), if j(x) = 1 + x. 



2. For any (a, b, c, d) £ J\f , we have an split exact sequence: 

1 — > { l ) — > A\it k {C r abcd ) — > T abcd — > 1, 

Fabcd being the isotropy group of (a,b,c,d) under the action ofT: 

/ C 2 , ifb = 0, aeAS(k), 
abcd otherwise. 
Proof. We can argue as in the proof of Proposition 8. When 6 = 
and a = w + w 2 for some w £ k, it is obvious that the choice v un = w, 
for 7(x) = 1 + x, determines a homomorphism from to k. □ 



cnp.tex; 1/02/2008; 11:03; p. 11 



12 



G. Cardona, E. Nart and J. Pujolas 



Case (l,l,l)-cubic 

We fix a system of representatives, Cub^, of cubic extensions of k 
modulo isomorphism. By Lemma 7, we can identify Cub/% with a subset 
of k containing representatives s G k of cubic irreducible polynomials 
of the type x 3 + sx + s. 

Let N = ((kxkxk)- {(0,0,0)}) x (k/ AS(k)). Any curve with 
ramification divisor of this type is ^-isomorphic to one of the curves 
C s ahcd with quasi-affine model: 

2 ax 2 + bx + c 

V +V = —5- : h a, (a,b,c,d) G jV. 

x^ + sx + s 

For these curves, W = 2[0] + 2[0'] + 2[0"], where 0,0', 0" G k are the 
roots of the irreducible polynomial x 3 + sx + s. The set contains 
the three Weierstrass points of the curve, which are defined over the 
splitting field of this polynomial, together with two points, Poo,?^, 
conjugate by the hyperelliptic involution. These two points lie over 
the point with projective coordinates (x,y,z) = (1,0,0), which is an 
ordinary double point with tangents y 2 + yz + dz 2 = 0; thus, they 
are defined over k if d £ AS(fc), otherwise they are defined over the 
quadratic extension determined by d. 

By Lemma 6 two curves corresponding to different values of s are 
not fc-isomorphic. If A; is a finite field, there is a single value of s: any 
choice of s £ k such that x 3 + sx + s is irreducible. 

If the cubic extension k(6)/k is not cyclic, then the isotropy group 
T := Tw of the set {9,0', 6"} under the action of PGL2(fc) is trivial, 
and we have as an immediate consequence of Proposition 5: 



PROPOSITION 10. Let s G Cub^ correspond to a non-cyclic cubic 
extension. Then, 



1. For any (a,b,c,d), (a' ,b' ,c' ,d') G M, the curves C^, Vc , d ,, an 



IS 

' 'abed 

k-isomorphic if and only if (a 1 , b', d , d') = (a, b, c, d). 



2. For any (a,b,c,d) G N, we have Autk(C^ bcd ) = (t). 

In the cyclic case, and by Lemma 7, we have: 
wx + s (1 + vS)x + s 

r = {x, 7 ' ! > - C3 > 

X + W + 1 X + w 

where s = 1 + w + w 2 for some w G k. In order to compute the action 
of T we need the following observation, whose proof is straightforward: 
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LEMMA 11. For any w G k, let us consider the matrix 



M{w) 



I w 2 + w 3 1 + w 3 1 + w + w 5 w 2 \ 

1 + w + w 2 w 2 1 + w 2 + w A w 
1 + w w w 3 1 

V 1 / 



Then, M(w + 1) = M(w) 2 and M{w) 3 = I 3 . Moreover, if we let M(w) 
operate on the right over ftf just by matrix multiplication: 

(a, b, c, d) M(w) := {a, b, c, d)M(w), 

then, the fixed points of this action are (a,a,a(w + w 2 ),d), for arbitrary 
a£ k* and d G k/ AS(k). 

PROPOSITION 12. Let s G k be such that x 3 + sx + s is irreducible 
and s = 1 + w + w 2 for some w £ k. Then, 

1. For any (a,b,c,d), (a' ,b' , c' ,d') G M, the curves C s a , h , dd ,, C s abcd are 
k-isomorphic if and only if (a' ,b' , c' ,d') coincides with one of the 
following elements in the orbit of (a,b,c,d) under the action ofT: 



' (a,b,c,d), if 7(x) = x, 



(a, b, c, d) 1 = < 



(a,b,c,d)M(w), if j(x) - 
{a,b,c,d)M(w + 1), if-/(x)- r+w 



x+w+l ' 
_ (l+w)c 



x+s 



2. For any (a, b, c, d) G J\f , we have an split exact sequence: 

1 __> ( L ) __> Aut fe (C^ cd ) — , r afec , — , 1, (3) 
Tabcd Veins' i/ie isotropy group of (a,b,c,d) under the action ofT: 



-T abed — 



C3, if a = b, c = a(l + s), 
1, otherwise. 

Proof. We can argue as in the proof of Proposition 8. The compu- 
tation of T a bcd is consequence of Lemma 11. When a = b, c = a(l + s) 
we can choose v u :Y u i x \ — > k to be the trivial homomorphism. □ 

For instance, when a = b, c = a(l + s), the subgroup of Autfc(C* fec(J ) 
generated by (x,y) 1— > (^^pj,y) is cyclic of order three. 

If a cubic extension admits a generator with minimal polynomial 
over k of the type x 3 + s, it might be easier to work with models C^ bcd 
of the type: 

2 ax 2 + bx + c , , , A . . 

V +V = 3- \-d, {a,b,c,d) G At. 

x d + s 

If the cubic extension is not cyclic, Proposition 10 is valid for these 
models as well. If a cyclic cubic field admits a cyclic generator, then 
F4 C k. In this case, Proposition 12 might be substituted by: 
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PROPOSITION 13. Assume that F 4 C k and let s G k be such that 
x 3 + s is irreducible. Then, 

1. For any (a,b,c,d), (a' ,b' ,d ,d!) G M , the curves C^, b , c , d ,, C s abcd are 
k-isomorphic if and only if 

(a , b' , c , d') = (e 2 a, eb, c, d) 

for some e£^. 

2. For any (a,b,c,d) G J\f , we have an split exact sequence (3) where, 

. fC 3 , t fa = b = 0, 

abcd ~\l, otherwise. 

Case (1,3) 

Let J\f = k* x k x k* x (kj AS(/c)). Any curve with ramification divisor 
of this type is /c-isomorphic to one of the curves C a b c d with quasi-afhne 
model: 

y 2 + y = ax 3 + bx -\ h d, (a, b, c, d) G N. 

x 

For these curves, W = 4[oo] + 2[0], and contains only the two 
Weierstrass points of the curve, which are defined over k. The subgroup 
r := T w is, in this case, T = {Xx \ A G k*} ~ k* . 

PROPOSITION 14. 

1. For any (a,b, c, d), (a' ,b' , d , d') £ N, the curves 0^^^^/, C a b cc i are 
k-isomorphic if and only if (a' \b' , d ,d') coincides with one of the 
following elements in the orbit of (a,b,c,d) under the action ofT: 

(a, b, c, d) Xx = (A 3 a, Xb, A _1 c, d), X G k* . 

2. For any (a,b,c,d) G N, we have Autk(C a bcd) = (i). 

Case (5) 

This case is known as the supersingular case, since the jacobian of these 
curves splits up to isogeny as the square of a supersingular elliptic curve 
over k. This case has been thoroughly studied by van der Geer and van 
der Vlugt in the finite field case (cf. [10, 11]). 

Let M = k*xkxkx(k/ AS(/c)). Any curve with ramification divisor 
of this type is ^-isomorphic to one of the curves C a b c d with quasi-affine 
model: 

y 2 + y = ax 5 + bx 4 + cx 3 + d, (a, b, c, d) G N. (4) 
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For these curves, W = 6[oo], and contains only the Weierstrass 
point of the curve, which is defined over k. The subgroup T := Tyy is 
now the affine group, 

r = {Ax + v I (A, v) G k* x k} ~ k* x fc. 

LEMMA 15. Given a, 6, c G fc, a / 0, consider the linear separable 
polynomial E ac (x) = a 4 x 16 + c 4 x 8 + c 2 x 2 + ax G k[x]. Then, the subset 

_ J {(1, u) £ k* >j k \ E ac {v) = 0}, 
Labc - \{(\,v)ek* xk\\ 5 = l, E ac (v) = b(l + \)}, ifc = 0, 

is a subgroup of ' k* x and i/ie map 

<Wr a6c — ►fc/AS(fc), (A, i/) i — > ai/ 5 + 6z/ + ci/ 3 , 

is a group homomorphism. 

Proof. Given any (A, i/), (A', v') G F abc Q k* x k, their product is 
(AA', \v' + z/). If c / 0, r a i, c is a subgroup by the linearity of E ac (x). If 
c = we have also: 

E ac (\v' + u) = \E ac {u') + E ac {u) = A6(l + A') + 6(1 + A) = 6(1 + AA')- 
The assertion concerning 5 a b c is left to the reader. □ 

We note that if c / or ^(k) = {1} then Ker(<5 a fe c ) is isomorphic 
to a subgroup of C2 x C2 x C2 x C2. 

As in the previous cases, Proposition 5 leads to: 

PROPOSITION 16. 

1. For any (a,b,c,d),(a',b',c',d') G N, the curves C a >(,' c 'd'> C a b c d are 
k-isomorphic if and only if (a' , b' , d , d') coincides with one of the 
following elements in the orbit of (a,b,c,d) under the action ofT: 

(a, 6, c, d) Xx+u = (A 5 a, A 4 (6 + E ac (u)), A 3 c, au 5 + bu A + cu 3 + d). 

2. The isotropy group of any (a, 6, c,d) G M under the action of V is 
Ker(<5 a b c ). We have an exact sequence (which rarely splits): 

1 — ► ( 1 ) — ► kut k (C abcd ) — > Ker(S abc ) — > 1. (5) 
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1.4. Number of curves of genus two over a finite field 

Let k = ¥ q be a finite field with q = 2 m elements. In this paragraph we 
find an explicit formula for the number of curves of genus two defined 
over k up to /c-isomorphism. Actually, we count how many curves there 
are for each type of ramification divisor. After the results of paragraph 
1.3, the number of curves having a concrete type of ramification divisor 
coincides with the numbers of orbits of the action of certain finite group 
r := T\v on certain finite set M. Denoting by T\\M the set of these 
orbits, we can count its cardinality by a well-known formula: 

l r \WI = 4|E^rl = ElF|. 

where C is a system of representatives of all conjugation classes of T 
and 

Mj = {x G M I x 1 = x}, r 7 = {/) G T | p7 = 7p}. 

From now on, a summand [a]^ m in a formula means "add a if b 
divides m". 

THEOREM 17. There are 2q 3 + q 2 + q - 2 + [8] 4 | m k-isomorphism 
classes of curves of genus two defined over ¥ q . The number of curves 
with a given type of ramification divisor is given in the following table: 

(l,l,l)-splii ig( Q - l)(2g - 1) 
(1,1,1)- quadratic \{q — l){2q 2 + q — 4) 
(l,l,l)-cubic i(2g 3 +4g-6) 
(1,3) 2q{q-l) 
(5}_ 4 g -2+[8] 4 | m 

Proof. By (6), we need only to compute \Afy\, in all cases. 

In the case (l,l,l)-split, T ~ 53 and we can choose C = {l,r, a}, 
where r(x) = 1 + x, a(x) = 1/(1 + x). Clearly, T T = {l,r}, T a = 
{1, a, a 2 }, and 

M T = {{a, b,b,d)\ae AS(fc) - {0}, bek*,dek/ AS(fc)}, 
A/" CT = {(a,a,a,d) | a G G fc/AS(fc)}. 

Hence, |M| = |AA| = 2(g - l) 3 , \Af T \ = 2{q - l)(q/2 - 1) and \J\f a \ = 
2(q-l). 

In the case (l,l,l)-quadratic, T = {1,t}, where t(x) = 1 + x; hence, 
M T = {(a, 0,c,d)\ae AS(k) - {0}, cek*,dek/ AS(fc)}. 
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Therefore, |M| = 2(q - l){q 2 - 1) and \N T \ = 2(q - l)(q/2 - 1). 
In the case (l,l,l)-cubic, F = {1,7, 7 2 } ~ C3 and 

M 1 = A/" 7 2 = {(a,a,a(l + s),d)\a G G fc/AS(fc)}. 

Hence, |A/i| = 2(q 3 - 1) and |A/" 7 | = \AT^\ = 2(q - 1). 

In the case (1,3), r ~ k* and for any A € fe*, A ^ 1, we have A/a = 0- 
Therefore, only |Ai| = 2q(q — l) 2 counts. 

In the case (5), r = k* x k and we can choose: C = {t}U{cja | A G A;*}, 
where r(x) = 1 + x, a\(x) = Xx. We have clearly (if A / 1), 

r T = {x + v\v G k}, T ax = {X'x\X' e k*}. 

For any given o^O, there are only two values of c such that E ac (l) = 
0; these are: cq = Va + a 2 , c\ = 1 + \/a + a 2 . Hence, 

A/" r = {(a,6,c,d) I a G A*,c G {c ,ci},& G a + c + AS(fe), d G A/ AS (A;)}, 

and \M T \ = 2q{q — 1). Finally, if A /is (A;), we have A/" CTA = 0, whereas 
for A G fJ,5(k), A / 1, we have M ax = {(a,0,0,d) | a G k*,d £ k/ AS(k)}, 
with cardinality 2(g — 1), whereas |Ai| = 2(g — l)g 2 . □ 

Also, from the results of paragraph 1.3 we can obtain a mass formula 
for the number of curves of genus two: 

THEOREM 18. Let [C] run on the k-isomorphism classes of smooth 
projective curves C of genus two defined over k. Then, 

^lAut^r^g 3 . 

[C] 

More precisely, the partial weighted sums J2[C\ I Autfc(C)| -1 , letting 
[C] run on the k-isomorphism classes of curves having a fixed type 
of ramification divisor, are given in the following table: 

(l,l,l)-split |(9-1) 3 

(1,1,1) -quadratic \(q — l)(q 2 — I) 
(l,l,l)-cubic i(g 3 - 1) 

(1,3) q 2 - q 

(5) q 
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Proof. Each partial sum can be computed as 

v i = 

(a,b,c,d)er\\Af\ Aut ^ Cabcd ^ 

E 1 — = — . 

(a,b,c,<i)er\W 2 ' rabcc( l (a,fe, c ,d)eAr 2 ' r l 2 ' r l ' 

for certain finite set J\f and finite group V acting on M, specified in 
paragraph 1.3. □ 

Both the total and the weighted number of supersingular curves had 
been already obtained by van der Geer and van der Vlugt in [11]. 



2. Geometric invariants of curves of genus two 

In this section we recall from [5] the definition of invariants that clas- 
sify curves of genus two over k up to isomorphism and we compute 
explicitly these invariants in terms of the rational models introduced in 
section 1. In paragraph 2.2 we deal with rationality questions concern- 
ing the curve C, its isomorphism class and the values of their geometric 
invariants. 

A fc-isomorphism between two curves defined over k is simply called 
an isomorphism and we denote by Aut(C) := Aut^-(C) the full group 
of automorphisms of a curve C. 

2.1. Igusa invariants 

Let C be a curve of genus two defined over k. According to the different 
possibilities for the ramification divisor of C, the curve admits a quasi- 
affine model of the type: 



2 b 

y z + y = ax H h 

X 


, abc / 0, 

x + 1 


type (1,1,1), 


y 2 + y = ax 3 + bx H 


X 


type (1,3), 


y 2 + y = ax 5 + cx 3 , 




type (5), 


. we define, respectively, 






h{C):=abc, h(C) 


:= ab + be + ca, 


j 3 (C) :=a + b + c. 


ii(C):=0, j 2 (C) 


:= ac 3 , 


h(C) :=bc, 


ji(C):=0, j 2 (C) 


:=0, 


j 3 (C) :=c 5 /a 3 . 
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DEFINITION 19. For any curve C of genus two denned over k we 
define the j-invariant of C as: 

j(C) := (ji(C),j 2 (C),j 3 (C))Gk 3 . 

By applying the results of paragraph 1.3 to the field k we get: 

THEOREM 20 (Igusa). 

1. The invariant j(C) depends only on the isomorphism class of C . 

2. Two curves of genus two defined over k are isomorphic if and only 
if they have the same j-invariant. 

3. The following table sums up the ramification type of C and the 
possible structures of Aut(C) in terms of the invariant j(C) = 
{ji,32, h): 



Type Condition 


Aut(C) 


Condition 




(1,1,1) ii/o 


c 2 

C 2 x C 2 
C 2 x S 3 


h + hh 
31 = 32 h, 
31 = 3233, 


31 + if 
ii = if 


(1,3) j 1 = 0,j 2 ^ 


C 2 






(5) ji =j 2 = 


Mi 60 


J3/0 
33 = 





The groups M32, M\qq sit in the middle of the non-split exact se- 
quence (5) and we shall study their structure more closely in section 3. 
Over an algebraically closed field, the group Kei(5 a b c ) of (5) is clearly: 

Kerfc) = ( Ker ^^ xC2XC2X ^ * c *° 
v ; I A*5 x KerKc, if c = 0. 

F° r ii 7^ 0, the first three conditions of the last column of the above 
table are respectively equivalent to the fact that the polynomial x 3 + 
33X 1 + 32X + ji € k[x] is separable, has a double root or a triple root. 

We compute now, in terms of the rational models given in section 
1, the j-invariant of a curve of genus two defined over k. 

In all cases, the curve determined by the parameters (a, b, c, d) is 
isomorphic to the curve determined by (a, b, c, 0); hence, the fourth 
parameter d may be ignored in the computation of the j-invariant. 
Moreover, in the supersingular case, the curve (4) determined by the pa- 
rameters (a, b, c, d) is isomorphic to the curve determined by (a, 0, c, 0). 
After these remarks, it only remains to treat the cases (l,l,l)-quadratic 
or cubic. 
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LEMMA 21. 

1. For a curve C of type (1,1,1) -quadratic with quasi-affine model 
given by equation (2), we have: 

h{C) = a{rb 2 +bc+c 2 ), j 2 (C) = ab+rb 2 '+bc+c 2 , j 3 (C) = a+b. 

2. Let s,t G k be such that the polynomial x 3 + tx + s is irreducible in 
k[x]. For a curve C of type (l,l,l)-cubic with quasi-affine model 

o ax 2 + bx + c 

V +V= x3 + tx + s> (7) 
the j -invariant of C is given by: 

j^C) = ^(a 2 (s 2 a + stb + t 2 c) +bc(tb + sa) + sb 3 + c 3 ), 

j 2 (C) = ^({a 2 t 2 + abs + c 2 ){s 2 + t 3 ) + cst(tb + sa) + 6 2 t 4 ), 

j 3 (C) = -(ta + c). 
s 

Proof. Assume that C is given by equation (2). If 8, 9' are the roots 
of x 2 + x + r, we have that 

bx + c b6 + c ^b6' + c 



x 2 + x + r x + 6* x + 1 ' 

hence, the mapping (x, y) i— ► (x + #, y) is an isomorphism from C to the 
curve C" given by an split equation y 2 +y = a' +{b' / x) + {c' / (x + l)) + d\ 
where 

a' = a, b' = b9 + c, c' = W + c. 

It is easily checked now that j(C) = j(C) has the claimed values. 

Assume now that C is given by equation (7). If 6,6', 6" are the roots 
of x 3 + tx + s, we have that 

ax 2 + bx + c A A' A" 



x 3 + tx + s x + 6 x + 6' x + 6" 1 
where A, A', A" G k are given by 





Hence, the mapping (x,y) (^■^^■,y) is an isomorphism from C to 
the curve C given by the equation y 2 + y = a' +(b' /x) + (c' / (x + l)) + d' , 
where 

(a', b', c') = - (6 2 A, {6') 2 A', {6") 2 A") . 
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Therefore, the values of ji(C) = ji(C), i = 1,2,3, are the coefficients 
of the minimal polynomial of (a9 5 + b9 4 + c9 3 )/s 2 over k. □ 

2.2. Field of moduli and field of definition 

Let C be a curve of genus two defined over k. An intermediate field K 
of k/k is said to be a field of moduli for C if C is isomorphic to a C for 
all a € G K . By Theorem 20, 

C ~ °C j(C) = jTO ^ j(c) = CT j(C7), 

so that K is a field of moduli for C if and only if j(C) € i^T 3 . 

If the curve C is defined over k, then clearly j(C) G A; 3 and is 
a field of moduli for C. We want to see the converse: given a curve 
of genus two defined over k, having A; as a field of moduli, then C is 
isomorphic to a curve defined over k. This result is false for curves of 
genus two over fields of characteristic different from 2, with non-trivial 
two-torsion in the Brauer group, but the situation is well understood 
(cf. [7], [2]). 

THEOREM 22. For any given value of j £ k 3 , there exists a curve of 
genus two C defined over k such that j(C) = j. 

Equivalently, we could formulate this result in the following form: 

COROLLARY 23. LetC denote the quotient set of all curves of genus 
two defined over k, classified up to k -isomorphism. Then, the j-invari- 
ant sets a bijection between C and k 3 . 

For k a finite field, Theorem 22 follows immediately from Theorem 
18 and the following result of van der Geer and van der Vlugt (cf. [11, 
Proposition 5.1]): 

J2\ Anther 1 = \j(C)\, 

[C] 

where [C] runs over all /c-isomorphism classes of curves of genus two 
defined over k. We give now a direct proof of Theorem 22, for general 
k, essentially by exhibiting rational models of curves of genus two with 
prescribed j-invariant. 

Proof of Theorem 22. Let j = (ii, J2, J3) S k 3 be given. We find a 
quasi-affine model for a curve C defined over k such that j(C) = j. 

If ji = J2 = 0, the following supersingular curves have j(C) = j: 

y 2 + y = VJ3X 5 + VJ3^ 3 , ifj'3/0, 
y 2 + y = x 5 , ifj3 = 0. 
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If ji = 0, j2 / 0, then the following curve of type (1,3) has j(C) = j: 
V 2 +V = 32X 3 + hx + -. 

X 

If ji 0, consider the polynomial F(x) = x 3 + j^x 2 + J2X + ji G k[x]. 
We proceed in this case according to the arithmetic structure of the set 
of roots of F(x). If F(x) splits in k[x], F(x) = (x + a)(x + b)(x + c), 
then the curve C of type (l,l,l)-split with quasi-affine model: 

2 be 

y +y = ax+ - + 

X x + 1 

has j(C) = j. If F(x) = (x + a)Q(x) for some quadratic irreducible 
polynomial Q(x) = x 2 + «x + u, then the curve C of type (1,1,1)- 
quadratic with quasi-affine model: 

2 UX +U 

y +y = ax + 



x 2 + x + (v /v?) ' 

has j(C) = j, by Lemma 21. Finally, assume that F{x) is irreducible in 
k[x]; let w G /c be a root of F(x) and i^T = k(u). The element = uJ + js 
has minimal polynomial x 3 + tx + s over k, where t = ji + if and 
s = ji + J2J3- It is easy to check that # 3 , 6> 4 , 6 5 is a fc-basis of K; hence, 
there exist unique a,b,c £ k such that 

a9 5 + b6 A + c6> 3 = s 2 u. (8) 

For these values of a, b, c, the curve C of type (l,l,l)-cubic with quasi- 
affine model given by (7) has j(C) = j, by the proof of Lemma 21. For 
the sake of completeness, we give an explicit equation (7) in terms of 
ji, J2, J3 in this last case. If j 2 = j 2 , we can take t = 0, s = j\ + j 2 j3 
and 

a = 0, b = ji + j 2 j3 , c = J 3 (ji + J2J3 ) • 

If j 2 + j 2 , taking t = s= ffigf^ , the element = ^g|(o; + j 3 ) 
has minimal polynomial x 3 + sx + s over /c (see the proof of Lemma 7). 
For this choice of t, s, 6, the values: 

a _ b _ (jl+J3 3 )(j2+j 3 2 ) 2 ; 

(ji + hh) 2 
c _ (J2 + j 3 2 ) 3 (ii(j2 + j\? + j 3 (ii + i 3 3 ) 2 ) 
(ii + J2J3) 4 

satisfy (8). □ 
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3. Arithmetic invariants of curves of genus two 

Let C be a curve of genus two denned over k. A twist of C over k is 
any curve of genus two, denned over k, which is isomorphic to C. We 
denote by Tw(C/k) the quotient set of all twists of C over k, classified 
up to fc-isomorphism. There is a well-known isomorphism of pointed 
sets, 

Tw(C/fc) H\G k ,Aut(C)), (9) 

sending any twist <j>: C ^> C to the 1-cocycle {cf) cr (f)^ l } cre c k - F° r details 
concerning non-abelian cohomology we address the reader to [8, Ch.VII, 
Annexe] . 

In this section we obtain an explicit description of the set Tw(C/fc) 
of twists of a given curve C, in terms of the rational models of section 1. 
This is achieved by an explicit computation of H l {Gk-, Aut(C)) for any 
possible structure of Aut(C). The parameters describing the pointed 
set H l {Gk, Aut(C)) are what we call the arithmetic invariants of the 
curve. In this way, we obtain an explicit parameterization of all k- 
isomorphism classes of curves of genus two, each class being determined 
by a couple of invariants, one geometric and the other arithmetic. For 
k a finite field, this provides formulas for the number of curves whose 
full group of automorphisms has a concrete structure. For finite fields 
of odd characteristic an analogous result has been obtained in [1]. 

As a by-product, we are able to implement an algorithm that builds 
up, almost directly, a faithful and complete system of representatives of 
/c-isomorphism classes of curves of genus two over a finite field k of even 
characteristic. This algorithm was used in [6] to carry out a numerical 
exploration about the existence of jacobians of curves of genus two in 
a certain isogeny class of abelian surfaces over k. 

3.1. Hyperelliptic twists 

Let C be a curve of genus two defined over k, with hyperelliptic invo- 
lution i. By Artin-Schreier theory, we have an isomorphism: 

H := fc/AS(fc) ~ H\G k ,(i)) = Hom(G fe , ( t)). (10) 

Thus, elements in H can be thought as 1-cocycles of £?& with values in 
Aut(C) and they furnish twists of C by (9). We obtain in this way an 
action of the group H on the set of curves of genus two defined over k. 
The curves in the orbit of C under this action are called hyperelliptic 
twists of C, and we denote by Tw (C/fc) the quotient set of this orbit 
modulo fc-isomorphism. 

If C admits a quasi-affine model y 2 + y = u(x) for certain u(x) £ 
k(x), the hyperelliptic twist of C corresponding to d G H is the curve C' 
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with model y 2 + y = u(x) + d. If v G k satisfies v 2 + v = d, the mapping 
(x, y) i— > (x, y + f ) is an isomorphism between C and C, defined over 
the quadratic (or trivial) extension of k determined by d. 

Any isomorphism, <p: C' C, between two curves of genus two 
commutes with the respective hyperelliptic involutions: up = (pi 1 . There- 
fore, the action of H is compatible with isomorphisms and with k- 
isomorphisms. In particular, we have an induced action of H on the set 
Tw(C/fc). For any C' G Tw(C/fc) we shall denote by He the isotropy 
group of C under this action; note that the orbit of C can be identified 
with Tw°(C'/fc). In order to describe Tw(C/fc) we need to compute the 
set of orbits and all the isotropy subgroups. 

Consider the central exact sequence of Gfc-groups: 

1 — >(i) — >A — vA! — >1, (11) 

where A := Aut(C), A 1 := A/(t) denote respectively the full group 
and the reduced group of automorphisms of C. Since H 2 (Gk, C2) = 0, 
the cohomology exact sequence of (11) induces an exact sequence of 
pointed sets, 

1 H\G k ,(L))/5{{A') G x) H l (G k ,A) H\G k ,A>) 1. 

(12) 

The connecting homomorphism 5 sends any U' G (A') Gk to the homo- 
morphism 

6{U'):G k ^(i), a^U'V- 1 , 
where U G A is any preimage of U'. From (12) we get: 

PROPOSITION 24. The isotropy group He of C under the action 
of H on Tw(C/k) corresponds to 5((A') Gk ) under the isomorphism 
H ~ H 1 (G k , ( 0) of (10). Moreover, 

Tw(C/fc) = [J Tw °(Q/ fc )> 

where £ G H 1 (G k ,A) is any choice of a preimage of £' and is the 
twist of C corresponding to £ by (9). 

Proof. Since 1 is central in A, the group H 1 (G k , (t)) acts on the set 
H 1 (G k ,A) by multiplication and the orbits are the subsets of classes 
having the same image in i7 1 (Gfe, A'). On the other hand, it is easy 
to check that the twists corresponding to the orbit of one class £ G 
H 1 (G k ,A) are precisely those in Tw° (C^/k). □ 

By the Proposition, the orbits of Tw(C/fc) under the action of H 
are parameterized by iJ 1 (Gfc,yl') and the isotropy group of each is 
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Hc i — S(A'^ Gk ), where A'^ is the reduced group of automorphisms of the 
curve C%. These curves may have in principle different isotropy sub- 
groups. If A is abelian, we get a more uniform description of Tw(C/k), 
since we have then an isomorphism of pointed sets: 

H\G k ,A) ~ H\G k ,(i))/5{{A') G *) x H\G k ,A'), 

and all curves have the same isotropy subgroup. 

It is easy to describe Hq in terms of a rational model of C by 
applying the results of section 1: 

PROPOSITION 25. Let C be a curve of genus two defined over k given 
by a rational model with parameters (a, b, c, d) as in section 1. Then, 

1. If C is super singular, then He = <5 a bc(r a &c) ( see Lemma 15). 

2. If C is of type (l,l,l)-split, two at least ofa,b,c are equal and the 
third coefficient (equal to the former two or not) does not belong 
to AS(fe), then He — C 2 is the subgroup generated by this third 
coefficient. 

3. If C is of type (1 ,1 ,l)-quadratic, 6 = and a AS(fe), then He — 
C<i is the subgroup generated by a. 

4- In all other cases, He is trivial. 



3.2. Twists of curves of genus two 

By Corollary 23, each triple j = (ji, J2, Js) € k 3 can be identified 
with a unique element in C, the quotient set of all curves of genus two 
defined over k classified up to isomorphism. By Theorem 20, this set C 
decomposes, 

C = C C2 U C C2 xC 2 U CcaxS^ U ^ M ' A2 U ^ M ieo> 

as the disjoint union of subfamilies gathering all curves with isomorphic 
automorphism group. In this paragraph we find an explicit description 
of these subfamilies and of the twists of each curve in the family. 

Curves with Aut(C) ~ C2 

This is the generic case. The set of values of the geometric invariants 
is: 

j(C C2 ) = J ■■= {UuhJs) e k 3 \j! ±hh} u {(0, j 2 ,0) e k 3 \j 2 + 0}. 



cnp.tex; 1/02/2008; 11:03; p. 25 



26 



G. Cardona, E. Nart and J. Pujolas 



We build up Cc 2 by choosing for each j € J the curve with j(C) = 
j indicated in the proof of Theorem 22. For each curve C G Cc 2 , 
Tw(C/fc) = Tw°(C/A;) is in bijection with the set of arithmetic in- 
variants H l {G k ,A) ~ fe/AS(fe). 

If k is the finite field with q elements, there are q 3 — q 2 + q — 1 
values of the geometric invariants and the total number of curves with 
Aut(C) ~ C 2 is 2(q 3 -q 2 +q-l). 

Curves with Aut(C) ~ C 2 x C 2 

The set of values of the geometric invariants is: 

i(Cc 2 xc 2 ) = J ■= {(31,32,33) e ^ 3 lii = 3233, h + 0, j 2 / jf}. 

The condition (31,32,33) G J is equivalent to: 

x 3 + hx 2 + j 2 x + ji = (x + a)(x + c) 2 , a,c £ k* , a ^ c. 
Hence, we can make the following choice for Cc 2 xC 2 - 

Cc 2 xc 2 = {y 2 + V = ax + - H C — \a,c £ k*, a ^ c}. 

x x + 1 

Let C £ Cc 2 xC 2 be fixed and let w £ k be such that w 2 + w = a. 
The automorphism group of C is A = {1, t, £/, where £7 is the non- 
hyperelliptic involution, U(x,y) = (x + l,y + u/). If a G AS(fc), then 
^4 has trivial G^-action. If a AS(fc), the automorphisms C7 and tcT 
are exchanged by the action of any a £ with non-trivial image in 
Gal(k(w) / k) . In both cases A' has trivial action and He — S(A') is the 
subgroup of kj AS(k) generated by the class of a. Since A is abelian, 



A class £' G ii^G*, A') = Hom(G fc ,A') is identified with the cl- 
ement r £ kj AS(fc) representing the quadratic or trivial extension 
of k through which the homomorphism £' f actor izes. As a preimage 
£ £ A) we can choose the class corresponding to the twist: 



H\G k ,A)~ 



' fc ,(0)A(A')xi7 1 (G' fc ,A' 



{0,a} + AS(fc) AS(fc)' 



k 



y 2 + y = ax + 



c 



2 + x + r ' 



which is isomorphic to C via 



(x, y) ^ (x + 8,y + v), 9 2 + 9 = r, v 2 + v = aO. 



(13) 
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We get the following parameterization of Tw(C/k) in terms of the 
arithmetic invariants: 

Tw(C/fc) = 

= ^ + V = aX + x^TxT7 + d 1 {d > r) £ {0, a} + AS(fe) X xfe) } ' 

If A; is the finite field with g elements, there are (q — l)(q — 2) values of 
the geometric invariants and the total number of curves with Aut(C) ~ 
C 2 x C 2 is: 

4(|-l)(a-2) + 2|(a-2) = (3a-4)(g-2). 



Curves with Aut(C) ~ C 2 x 53 

The values of the geometric invariants and a concrete choice for Cc 2 x S3 
are: 

i(Cc 2X 5 3 ) = itilolh) e fe 3 lis / 0}, 

Cc 2 xS 3 = {y 2 + V = ax + - H ^— ) I a G fc*}. 

x x + 1 

Let C G Cc 2 xS 3 be fixed and let u; G fc be such that w 2 + w = a. The 
automorphisms 

U(x,y) = (x + l,y + w), V(x,y) = (-^-j,y), 

generate a subgroup S C A, isomorphic to £3, such that A = ( 1 ) x S 
(see the remark after Proposition 8). Hence, A' ~ S3 and it is generated 
by the images U', V' of U, V. If a G AS(fc), then yl has trivial G^-action. 
If a AS(fe), only the automorphisms ?7, tC/ are not G^-invariant; they 
are exchanged by the action of all a G Gfc with non-trivial image in 
Gal(fc(iu)/A;). In both cases A' has trivial Gk action, so that: 

H\G k ,A') = Hom(G fc , A')\Inn(A') ~ U Cub fe . 

Any non-trivial r G k/ AS (A;), associated to a quadratic extension 
K/k, is identified with the class of the 1-cocycle determined by the 
isomorphism G&l(K, k) -+ {1, U'}. Any s G Cub*,, associated to a cubic 
extension K/k with normal closure -fT, is identified with the class of the 
1-cocycle determined by an isomorphism Gal(K, k) ^ {1, V', (V) 2 }, or 
Gal(.fif, k) ^ A'. We can respectively choose as twists Cg associated to 
preimages £ G H l {Gk,A): 

2 ° 2 asx 2 + asx + as(s + 1) 

Ct: y +y = ax + ^- ■ — , y +y- 



x z + x + r x^ + sx + s 
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The curves with quadratic denominator are isomorphic to C via 
(13), whereas for those with cubic denominator we can take: 

Q(x + 0) 

( X ,V) -> ( e ,\ x + 'y y + v ^ 3 + s6 + s = 0, v 2 + v = aw. 

By Propositions 24 and 25, Tw(C/fe) is parameterized as the disjoint 
union: 

Tw(C/fc) = 

= {y 2 + y = ax+ a +d\(d,r)e k x -t-^tt} 
x" 1 + x + r |0,a}+AS(/c) Ab(k) 

r o asx 2 + asx + as(s + 1) , . , , , k ^ , , 

As mentioned in section 1, for certain values of s £ Cubfc one can use 
the curves, y 2 + y = as/(x 3 + s) + d, instead of the above ones. 

If k is the finite field with q elements, there are q — 1 values of the 
geometric invariants and the total number of curves with Aut(C) ~ 
C 2 x S3 is: 

2| + 4(|-l)+2(g-l)=5g-6. 
Curves with Aut(C) ~ M32 

The values of the geometric invariants and a concrete choice for Cc 2 x M 32 
are: 

J'fe) = {(0,0,i 3 ) G k 3 \j 3 ^0}, 

Cm 32 = {y 2 + y = ax5 + ax3 1 a e 

Let C 6 Cm 32 De fixed and denote by E(x) := E aa (x) = a 4 x 16 + a 4 x 8 + 
a 2 x 2 + ax the linear separable polynomial considered in Lemma 15. 
Clearly, Ker(i£) is a subgroup of k isomorphic to C2 x C2 x C2 x C 2 . 
Recall that we have an exact sequence (5): 

1 — >(t) — ►Aut(C) — >Ker(E) — ► 1. (14) 

Given f £ Kei(E), the two automorphisms of C lifting u are 

±J7 I/ (x, y) = (x + z/, y + i + *i£ + *2^ 2 ), 

where 

t x = au 2 {l + z/ 2 ), t 2 = Vau, t 2 Q + t = av 3 (l + v 2 ). 

The plus or minus sign before U v correspond to any choice of the two 
possible values of to- Thus, (14) is an exact sequence of G^-groups and 
A' ~ Ker(E) as G^-groups. 
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From the exact sequence of abelian GVgroups: 
1 — ► Ker(E) — >k-^k — > 1, 

we see that H 1 ^, Ker(E)) ~ k/E(k). For any b £ k/E(k), the 1- 
cocycle associated to b is given by = (3 + °/3} CT6 G fc , where P £ k 
satisfies = 6. Thus, we can choose the following twists associated 
to preimages in H 1 (Gk,A) of these cocycles: 

Cj.: y 2 + y = ax 5 + bx 4 + ax 3 , bek/E(k). 

Isomorphisms to C are given by (x, y) i— > (x + /?, y + to + t\x + t2X 2 ), 
where 

ti = a/3 2 (l + /3 2 ), t 2 = ./aJTb, t 2 + t = af3 3 (l + (3 2 ) + bf3 A . 
By Propositions 24 and 25, 
Tw(C/fc) = 

= II {2/ 2 + 2/ = ax 5 + 6x 4 + ax 3 + d|de — — - — — }. 

If k is the finite field with q elements, there are q — 1 values of the 
geometric invariants and the total number of curves with Aut(C) ~ 
M 32 is 4q-5-[2] 2{m . 

Curves with Aut(C) ~ M 160 

In this case Cm 160 consists in one single curve C, with model y 2 +y = x 5 
and j-invariant j(C) = (0,0,0). 

For any a G k*, we denote by E a (x) := E a o(x) = a 4 x 16 + ax, the Fig- 
linear separable polynomial considered in Lemma 15. Since E a (Xx) = 
XE a (x), for all A G ^5, there is a well defined action of the group ^5 (&:) 
onk/EaW-H^G^KeriEa)). 

For a = 1, we have Ker(£a) = Fie and the exact sequence (5) is: 

1 — ► (i) — ► Aut(C) — >fi 5 »¥ 16 — >1. (15) 
The two automorphisms of C lifting any (A, v) G ^5 xi Fi6 are 
i^A.z/)^ y) = (Ax + z/, y + t + *iz + t 2 x 2 ), 

where 

+ . _ \,,4 + _ _ \2,,8 



ii = Ai/ 4 , t 2 = AV, *g + t = i/ 5 . 



The plus or minus sign before Un u \ corresponds to any choice of the 
two possible values of to- Thus, (15) is an exact sequence of GVgroups 
and A' ~ ^5 x Fi6 as GVgroups. 
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From the split exact sequence of G^-groups: 

1 — ► Fl6 — ► A' > fl 5 ► 1, 

we get an exact sequence of pointed sets: 

H\G k ,¥ 16 ) -U H\G k ,A') -2U H\G k ,» 5 ) — 1. (16) 

Under the identification H^-^Gk^ie) — k/E±(k), we have that i(b) = 
i{b') if and only if there exists A G ns(k) such that b' = Xb; hence, we 
get from (16) an exact sequence of pointed sets: 

1 — (k/E^k^ik) -U H\G k ,A') -2U H\G k ,fi 5 ) — 1. 

In a similar way, for any other value of o £ fc*, we can consider the 
mapping 

(k/E a (k))\^(k)^H\G k ,A'), 
sending the class of any b G k to the class of the 1-cocycle: 

where a, j3 G A; satisfy a 5 = a and E a {j3) = 6. It is not difficult to check 
that this mapping is 1-1 with image 7r _1 ([a]), where [a] G k*/(k*) 5 ~ 
i^ 1 (Gfc,^5) is the class of a. Thus, 

H\G k ,A)~ [J (k/E a (k))\^ 5 (k). 

aek*/(k*) 5 

We can choose as twists associated to preimages in H 1 (G k ,A): 

C ( : y 2 + y = ax 5 + bx\ a G k* /(k*) 5 , b G (k/E a (k))\fi 5 (k), 
isomorphic to C via (x, y) i— > (A(x + /3) , y + to + ii^ + t2X 2 ), where 

A 5 = a, h = a(3 4 , t 2 = a 2 /3 8 , t§ + t = a/3 5 . 
By Propositions 24 and 25, we can parameterize Tw(C/fe) as: 
Tw(C/*) =U [J 

aefe*/(fc*) 5 be(k/E a (k))\^ 5 (k) 

{y2 + y = ° x5 + fa4 + ' i| ' ie WrJ + ASW >- 

If A; is the finite field with q = 2 m elements, there is only one value of 
the geometric invariants and the total number of curves with Aut(C) ~ 
M 160 is 3 + [2] 2 , m + [8] 4 | m . 
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In fact, if 4 \ m, the groups k* /(k*) 5 , /J,s(k) vanish and 

H 1 (G k ,A')~k /Ei (k) =kj AS 4 (k) 

has 2 or 4 elements according to m odd or even. The twists of C are: 

Tw(C/fc) = {y 2 + y = x 5 + ex A \ e £ ¥} U {y 2 + y = x 5 + x 4 + d }, 

where F = F2, do = 1 if m is odd, whereas for m even, F = F4 and do 
is any choice of one of the two elements in F4 — F2 . 

If 4|m, we have k/E a (k) = for all a (k*) 5 and (fc/ AS 4 (/c))\ / u 5 
has 4 elements. Hence, ff 1 (Gfc,yl / ) has 8 elements and the 13 twists of 
C are: 

Tw(C/k) = {y 2 + y = ax 5 + d, I (a, d) G A:7(A:*) 5 x fc/ AS(fe)} U 

U{y 2 + y = x 5 + 6x 4 , | 6 G ((fc/ AS 4 (fc)) - {0}) \// 5 (fe)}. 
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